开放式最短路径优先(OSPF)协议作为目前大规模网络应用最广泛的自治域内路由协议,其安全不仅仅关系到自治域内,同时也关系到自治域外乃至整个网络的正常运行.传统的基于非对称性加密算法的数字签名解决方案能够实现端到端的安全验证,但是却忽略了点对点的方式,而且存储量和额外开销也一直是急需解决的问题.基于对称性加密算法,提出了适宜于OSPF等级区域的安全防护方案HS-OSPF.HS-OSPF扩充了OSPF网原有的二层等级结构,设计了合理、高效的密钥分配与管理方案,克服了传统非对称性密码方案的不足,降低了密钥存储量和系统开销,提高了网内安全通信的实时性.%As the most widely used autonomous intra-domain routing protocol for large-scale network,the security of Open Shortest Path First(OSPF) is not only about the normal running of autonomous intra-domain,but also closely related to inter-domain even the whole network.Based on asymmetric encryption algorithm,the traditional digital signature solution can realize the security validation of end-to-end; however,it ignores the issue of point-to-point.Additionally,the problem of storage and extra overhead also needs to be solved urgently.On the basis of symmetrical encryption algorithm,a new solution named HS-OSPF was put forward.HS-OSPF extended the original two-level hierarchical structure as well as designed a reasonable,efficient key distribution and management scheme.The result shows that the shortcomings of traditional solution are overcome,key storage and system overhead are reduced and real-time of security communication is improved.
展开▼
